Print Page | Close Window

banned members bug

Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=12099
Printed Date: 09 April 2026 at 8:32am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com


Topic: banned members bug
Posted By: kbannon
Subject: banned members bug
Date Posted: 09 October 2004 at 5:15pm

I often have to ban members for 1 month. I usually de-activate their accounts. However, I have just noticed that they can re-send the activation email.

The only way around this is to change their email addy to one of my own so the email cannot be recieved by them & I know if they are trying!

Maybe include a banned field in the next version?



-------------
I don't suffer from insanity, I enjoy every minute of it.



Replies:
Posted By: WebWiz-Bruce
Date Posted: 10 October 2004 at 8:58am
Thanks for letting me know I'll have to look into it.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting


Posted By: WebWiz-Bruce
Date Posted: 10 October 2004 at 9:00am
However, I have just remembered that even if they do have an actiavtion email sent through the activation page checks to see if the user is banned, if they are it will not activate the account.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting


Posted By: WebWiz-Bruce
Date Posted: 10 October 2004 at 9:02am
I have just checked the code on the resend activation email page and there is a check that if the user has had their account suspended they are sent to an insufficient permissions page.

Make sure that you are running the latest version and that the file is not corrupted.


-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting


Posted By: kbannon
Date Posted: 11 October 2004 at 4:20am
Thanks Borg.
Using v7.9 (SQL Server) which is not corrupted, I tested it and still someone whose account has been disabled can request a new activation email.
When you suspend an account, do you just click the radio button in their profile or am I missing something? From what you say, there must be something in the code that ticks a button or whatever in the DB when an account is disabled by a moderator?

-------------
I don't suffer from insanity, I enjoy every minute of it.


Posted By: WebWiz-Bruce
Date Posted: 11 October 2004 at 8:26am
In the profile you need to select that the user account is not active.

I have been through and tested this and if your account is suspended then it will display a message saying so for many parts of the forum.

If you try a go directly to the, resend activation email page (as a link will not appear to it), then you will be sent to a page saying you don't have sufficient permissions to go to that page.


-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting


Posted By: WebWiz-Bruce
Date Posted: 11 October 2004 at 8:42am
Sorry forgot to mention, it's not your database I was saying maybe corrupted, but the ASP files on the server.

Try reuploading the ASP files.

On the of biggest problems I find when people report errors is that s afile has got corruopted when FTPing them to the server.


-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting


Posted By: Emiliano
Date Posted: 11 October 2004 at 1:34pm

Originally posted by -boRg- -boRg- wrote:

In the profile you need to select that the user account is not active.

I have been through and tested this and if your account is suspended then it will display a message saying so for many parts of the forum.

If you try a go directly to the, resend activation email page (as a link will not appear to it), then you will be sent to a page saying you don't have sufficient permissions to go to that page.
.

boRg,

I had this problem too. I think if you just set the user account as not active and the user still has the original activation e-mail, he will be able to re-activate his account. I don't know what happens if you really ban his e-mail address.



Posted By: WebWiz-Bruce
Date Posted: 11 October 2004 at 1:48pm
The activation email can only be used once.

If you try to reuse it, or even refresh the page it will rerurn an error on the activation page, as the user code is changed when an account is activated.


-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting


Posted By: Emiliano
Date Posted: 11 October 2004 at 6:33pm

Hmmm... I don't know then... :-(

I set an user as not active and for my surprise he was able to login and post again. I could only think he had used his original activation email message. I need to find out what he did...

Look boRg, I'll make some tests tomorrow and let you know if I find out something, ok?

[]s,
Emiliano.



Posted By: WebWiz-Bruce
Date Posted: 12 October 2004 at 5:34am
If you could, but I have found in the past when such things happen that the person has hasselled a moderator to re-activate their account.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting


Posted By: kbannon
Date Posted: 12 October 2004 at 5:10pm

the file login_user_test tells me when I try logging in with a de-activated account the following:-

Successful Login

Your Forum Membership is not yet activated!

To activate your forum membership click on the link in the activation email you should have received after registering.

javascript openWin'resend_email_activation.asp','actMail','toolbar=0,location=0,status=0,menubar=0,scrollbars=1,resizable=1,width=475,height=200' - Resend Activation Email


http://www.bmwcarclubforum.co.uk/default.asp - Return to the Discussion Forum

Tried re-uploading the file but the above message is copied from the result!



-------------
I don't suffer from insanity, I enjoy every minute of it.


Posted By: Emiliano
Date Posted: 12 October 2004 at 5:26pm

Dear boRg,

After some tests, that's what we have:

1 - If you simply set the user as not active and this user tries to log in, he will be able to resend his activation email and will also be able to activate his account.

2 - If you set the user as not active and ban his e-mail account, it's just the same. I think banning works only to new registrations, right?

3 - If you set the user as not active and he tries to use his original activation e-mail, his account will not be reactivated! That's exactly what you said.

When I say that I banned the user, I'm talking about banning his e-mail address. I can't ban his IP because of dinamic IPs and I have not found any other kind of banning -- like banning a username.

That's it for now. I think we must really change the e-mail address of the "banned" user in order to avoid his account reactivation.



Posted By: Emiliano
Date Posted: 12 October 2004 at 5:28pm

Originally posted by -boRg- -boRg- wrote:

If you could, but I have found in the past when such things happen that the person has hasselled a moderator to re-activate their account.

Ah, just one more thing: this is not my case, for I'm the only moderator in the forum. ;-)



Posted By: WebWiz-Bruce
Date Posted: 13 October 2004 at 4:43am
I've found the problem, there wasa bug in the file login_user.asp that ment that even if an account was deactivated a new usercode would be created when the user logged in over writing the suspension data.

I did correct this problem but it seems in the rush to get 7.9 out, as people where hasselling me, I forgot to add the updated file to the zip file.

You'll have to wait for the next version in order to fix this bug now. Sorry.

This is why in my tests I could not replicate the problem.


-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting


Posted By: Emiliano
Date Posted: 13 October 2004 at 12:11pm

Originally posted by boRg boRg wrote:

You'll have to wait for the next version in order to fix this bug now.

boRg,

There's no problem at all to wait for the next version. We can handle this little problem the way kbannon did:

Originally posted by kbannon kbannon wrote:

(...)change their email addy to one of my own so the email cannot be recieved by them & I know if they are trying!

Right? ;-)
Thanks!

[]s,
Emiliano.



Posted By: kbannon
Date Posted: 14 October 2004 at 4:42pm

Fair Play Borg!



-------------
I don't suffer from insanity, I enjoy every minute of it.



Print Page | Close Window

Forum Software by Web Wiz Forums® version 12.08 - https://www.webwizforums.com
Copyright ©2001-2026 Web Wiz Ltd. - https://www.webwiz.net